1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
package main
import (
"context"
"os"
"os/signal"
"os/user"
"strconv"
"syscall"
"tildegit.org/tjp/sliderule/logging"
)
type config struct {
hostname string
geminiRoot string
tlsKeyFile string
tlsCertFile string
}
func configure() config {
return config{
hostname: os.Getenv("HOST_NAME"),
geminiRoot: os.Getenv("GEMINI_ROOT"),
tlsKeyFile: os.Getenv("TLS_KEY_FILE"),
tlsCertFile: os.Getenv("TLS_CERT_FILE"),
}
}
func dropPrivileges() (bool, error) {
me, err := user.Current()
if err != nil {
return false, err
}
if me.Uid != "0" {
return false, nil
}
nobody, err := user.Lookup("nobody")
if err != nil {
return false, err
}
uid, err := strconv.Atoi(nobody.Uid)
if err != nil {
return false, err
}
if err := syscall.Setuid(uid); err != nil {
return false, err
}
return true, nil
}
func serverContext() (context.Context, logging.Logger, logging.Logger, logging.Logger, logging.Logger) {
debug, info, warn, err := logging.DefaultLoggers()
ctx := signals(context.Background())
ctx = context.WithValue(ctx, "debuglog", debug)
ctx = context.WithValue(ctx, "infolog", info)
ctx = context.WithValue(ctx, "warnlog", warn)
ctx = context.WithValue(ctx, "errorlog", err)
return ctx, debug, info, warn, err
}
func signals(ctx context.Context) context.Context {
ctx, _ = signal.NotifyContext(ctx, syscall.SIGINT, syscall.SIGHUP)
return ctx
}
|
